invariant() on double injection